CVE-2022-49072

17

FAUCET Score

CVE-2022-49072 is a Linux kernel vulnerability affecting the GPIO subsystem. It arises from a race condition where GPIO chip interrupt members are accessed before full initialization, specifically impacting the gc->irq.domain variable via the I2C interface, leading to a Kernel NULL pointer dereference. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring local privileges, and resulting in high availability impact (system crash). There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 5.10.111CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.11, < 5.15.34CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.16, < 5.16.20CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 5.17, < 5.17.3CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		5.18CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel:5.18:rc1::::::

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.27%

Probability of exploitation in next 30 days

EPSS Percentile

18.3%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0027 is in the 74th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (25)

ansiblepatch availablevia llm_extracted

difypatch availablevia llm_extracted

freshrsspatch availablevia llm_extracted

hashicorppatch availablevia llm_extracted

puppetpatch availablevia llm_extracted

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-284.11.1.el9_2

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle-5.4 (bionic)Fixed in: 5.4.0-1154.164~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-aws (focal)Fixed in: 5.4.0-1156.166

ubuntupatch availablevia ubuntu_usn

Product: linux-oracle (focal)Fixed in: 5.4.0-1154.164

ubuntupatch availablevia ubuntu_usn

Product: linux-xilinx-zynqmp (focal)Fixed in: 5.4.0-1074.78

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-5.4 (bionic)Fixed in: 5.4.0-1159.168~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-5.4 (bionic)Fixed in: 5.4.0-1156.166~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-aws-fips (focal)Fixed in: 5.4.0-1155.165+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-hwe-5.4 (bionic)Fixed in: 5.4.0-227.247~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm (focal)Fixed in: 5.4.0-1102.107

ubuntupatch availablevia ubuntu_usn

Product: linux-fips (focal)Fixed in: 5.4.0-1130.140

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp-fips (focal)Fixed in: 5.4.0-1159.168+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-iot (focal)Fixed in: 5.4.0-1060.63

ubuntupatch availablevia ubuntu_usn

Product: linux-kvm (focal)Fixed in: 5.4.0-1143.152

ubuntupatch availablevia ubuntu_usn

Product: linux-azure-fips (focal)Fixed in: 5.4.0-1160.166+fips1

ubuntupatch availablevia ubuntu_usn

Product: linux-azure (focal)Fixed in: 5.4.0-1160.166

ubuntupatch availablevia ubuntu_usn

Product: linux-ibm-5.4 (bionic)Fixed in: 5.4.0-1102.107~18.04.1

ubuntupatch availablevia ubuntu_usn

Product: linux-gcp (focal)Fixed in: 5.4.0-1159.168

ubuntupatch availablevia ubuntu_usn

Product: linux (focal)Fixed in: 5.4.0-227.247

redhatvendor investigatingvia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (19)

ubuntuUSN-8098-9

Linux kernel (IBM) vulnerabilities

ubuntuUSN-8098-8

Linux kernel (Azure FIPS) vulnerabilities

ubuntuUSN-8098-7

Linux kernel (Azure) vulnerabilities

freshrssllm-freshrss-e1a44b7104d8b7ba

USN-8098-8: Linux kernel (Azure FIPS) vulnerabilities

ansiblellm-ansible-ed7b24a3597f7f30

USN-8098-8: Linux kernel (Azure FIPS) vulnerabilities

ubuntuUSN-8098-6

Linux kernel (FIPS) vulnerabilities

ubuntuUSN-8098-5

Linux kernel vulnerabilities

ubuntuUSN-8098-4

Linux kernel vulnerabilities

difyllm-dify-e1901446f41d8661

USN-8098-4: Linux kernel vulnerabilities

difyllm-dify-511d7e5d088caa40

USN-8098-6: Linux kernel (FIPS) vulnerabilities

difyllm-dify-4314e095f4014e76

USN-8098-5: Linux kernel vulnerabilities

hashicorpllm-hashicorp-c00c0e129cd22e3c

USN-8107-1: Linux kernel (AWS FIPS) vulnerabilities

ubuntuUSN-8107-1

Linux kernel (AWS FIPS) vulnerabilities

ubuntuUSN-8098-3

Linux kernel vulnerabilities

puppetllm-puppet-3b04d83ce1fd1010

USN-8107-1: Linux kernel (AWS FIPS) vulnerabilities

puppetllm-puppet-5736cc5c5fade70d

USN-8098-3: Linux kernel vulnerabilities

ubuntuUSN-8098-2

Linux kernel (GCP) vulnerabilities

ubuntuUSN-8098-1

Linux kernel vulnerabilities

redhatCVE-2022-49072Moderate

kernel: gpio: Restrict usage of GPIO chip irq members before initialization

References

git.kernel.org / stable/c/0912cf021fb5749372b3782611d8b1de4986c13a

Patch

git.kernel.org / stable/c/2c1fa3614795e2b24da1ba95de0b27b8f6ea4537

Patch

git.kernel.org / stable/c/5467801f1fcbdc46bc7298a84dbf3ca1ff2a7320

Patch

git.kernel.org / stable/c/7e88a50704b0c49ad3f2d11e8b963341cf68a89f

Patch

git.kernel.org / stable/c/f8dea54f74cae8c2e4d7b2952e8fed7743a85c87

Patch